Security Directory

N

NATUR-PACK, a.s.

naturpack.sk

58

NATUR-PACK, a.s. is a leading Slovak organization specializing in recycling and waste management services, particularly focusing on packaging waste, electrical equipment, batteries, and non-packaging products. The company serves manufacturers, municipalities, and the general public, providing consultation, education, and compliance support within the framework of extended producer responsibility (OZV). Their market position is strong, being the largest OZV in Slovakia with a broad client base and extensive regional presence. Technically, the website employs modern web technologies including JavaScript, jQuery, Owl Carousel, and integrates Google Tag Manager and analytics tools such as Google Analytics and Fathom Analytics. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. The cookie consent mechanism is comprehensive and GDPR-compliant, reflecting a mature approach to privacy. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking scripts responsibly. However, some standard security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. Incident response and explicit security policies are not publicly detailed, which could be enhanced. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. The domain registration data is consistent with the business claims, supporting legitimacy. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security policies, and improving incident response transparency.

K

Kúpele Sliač

kupelesliac.sk

70

Kúpele Sliač is a historic spa and wellness center in Slovakia with over 200 years of tradition, offering therapeutic water treatments and professional hospitality services. The website presents the business as a nationally recognized cultural heritage site with a focus on high-quality spa services. Technically, the site is built on WordPress with a modern tech stack including popular plugins for e-commerce, event management, and photo galleries. The site integrates Cookiebot for GDPR-compliant cookie consent and uses Google Analytics and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and well-optimized for users.

N

Nuaktiv a. s.

esmao.sk

53

The website www.esmao.sk represents Nuaktiv a. s., a Slovak company specializing in electronic government services for municipalities and public administration. The platform offers a comprehensive suite of eGovernment solutions including portals, submission management, payment modules, and integration with national government systems. It targets municipalities, public authorities, citizens, and integrated service points, positioning itself as a key player in Slovakia's digital government ecosystem with over 125 local government clients and more than one million users. Technically, the website employs a modern technology stack featuring Bootstrap, jQuery, and various UI plugins, ensuring responsive design and moderate performance. The site includes cookie consent mechanisms and uses Google reCAPTCHA for form protection, reflecting a basic level of privacy and security awareness. However, explicit privacy policies and security headers are missing, indicating areas for improvement in compliance and security posture. From a security perspective, the site uses HTTPS and has implemented cookie consent and spam protection, but lacks visible security headers and formal security policies. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business information, confirming domain legitimacy and consistency. Overall, the website is professional, trustworthy, and well-targeted, but could enhance its security and privacy compliance by adding explicit policies and improving technical security controls.

K

Krosapp s.r.o.

kroscloud.com

61

Kroscloud is a specialized web-based platform offering interactive 3D model viewing and hosting services, primarily targeting users who work with photogrammetry 3D scans and panoramic images. The platform supports advanced features such as multi-layer visualization, audio guides, multilingual interfaces, and protected content access, positioning itself as a niche SaaS provider in the 3D visualization technology sector. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience for its target audience. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries, with integration of Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and implements GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, as it reduces transparency and trust from a domain registration perspective, despite the professional appearance and functionality of the website. Overall, the site scores well in content quality, technical implementation, and privacy compliance, but domain registration opacity and minor security header gaps moderate the overall trust score.

B

Behnshop

behnshop.de

47

Behnshop is a German e-commerce retailer specializing in a wide range of alcoholic beverages, including spirits, liqueurs, and regional classics. The website positions itself as a trusted source for well-known brands and offers a comprehensive online shopping experience targeting mature consumers interested in quality spirits. The business appears to be medium-sized with a history dating back to 2014, likely affiliated with the Waldemar Behn GmbH brand portfolio. Technically, the site employs modern web technologies such as jQuery, Font Awesome, and integrates an advanced accessibility tool (digiaccess) to enhance usability for users with disabilities. The platform is likely built on a commercial e-commerce CMS, possibly Shopware, and is hosted with domain control services provided by GoDaddy.

B

Behn Getränke

behn-getraenke.de

42

Behn Getränke is a regional beverage wholesaler and retailer operating in Schleswig-Holstein, Germany, with a long-standing family business history dating back to 1892. The company offers beverage markets in multiple locations and provides gastronomy consulting and event inventory services. The website is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, indicating a moderate level of digital maturity. Accessibility is a strong focus, with an advanced accessibility tool integrated to support various user needs. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

M

Markant

voila-startups.com

52

voila-startups.com is a professional platform operated under the Markant brand, designed to connect startups and innovators with one of the largest retail networks in Germany and Europe. The website facilitates product presentation to over 200 retail partners, offering startups a streamlined and cost-free channel to access retail shelves. The business model centers on enabling innovation diffusion within the retail sector, targeting startups seeking market entry and growth. The platform is moderately sized and founded in 2019, consistent with the domain registration data. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and tracking tools such as Facebook Pixel and Jentis for analytics and marketing. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting and domain registration are managed by Deutsche Telekom AG, a reputable provider, ensuring stable infrastructure. From a security perspective, the site employs HTTPS and integrates cookie consent mechanisms, reflecting basic privacy compliance. However, it lacks explicit privacy and terms of service pages, security headers, and incident response contact information, which are areas for improvement. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious patterns were found in the WHOIS data, indicating a trustworthy domain. Overall, voila-startups.com presents a solid business and technical foundation with moderate security posture. Strategic enhancements in privacy documentation, security headers, and contact transparency would elevate its compliance and trustworthiness, supporting its role as a credible startup-to-retail platform.

C

Chodím beze stop

chodimbezestop.cz

59

Chodím beze stop is a Czech non-profit environmental awareness initiative focused on educating visitors about responsible behavior in nature, particularly regarding waste and hygiene practices. The website provides educational content, partner collaborations, and free programs to promote sustainable tourism and nature conservation. The target audience includes outdoor enthusiasts and environmentally conscious individuals in the Czech Republic. Technically, the website is built on WordPress with Yoast SEO and uses Facebook Pixel for tracking. It demonstrates good content quality, mobile optimization, and SEO practices but lacks advanced security headers and formal security policies. The domain is newly registered but consistent with the website's Czech focus and content. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, though it could improve security posture and transparency by adding incident response and vulnerability disclosure information.

D

Díky, že můžem

dikyzemuzem.cz

59

Díky, že můžem is a Czech non-profit organization dedicated to fostering respectful dialogue and civic engagement among citizens, especially targeting young people. Founded in 2014, it operates various year-round projects, educational programs, and discussions across the Czech Republic to promote societal cohesion and democratic participation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content aligned with its mission. Technically, the site is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Analytics, and OneSignal for push notifications, hosted via WEDOS and utilizing Cloudflare DNS services. Security posture is strong with HTTPS enforcement, standard security headers, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a solid balance of content quality, technical implementation, and privacy compliance, supporting the organization's credibility and trustworthiness.

M

Monte Bú Restaurant a steakhouse

monte-bu.cz

42

Monte Bú Restaurant a steakhouse is a premium dining establishment located in Brno, Czech Republic, specializing in exclusive steaks from their own dry-aging cellar, grilling, and premium American and Mexican cuisine. The restaurant also offers a unique collection of exclusive rums and rum tastings led by a rum sommelier. The business operates under the Con Gusto Restaurant Group umbrella, indicating a solid partnership and brand backing. Their market position is that of a unique steakhouse with a focus on quality and gourmet experiences, targeting local residents and visitors seeking high-end dining. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, Facebook Pixel, and other JavaScript libraries to deliver a responsive and interactive user experience. The site is mobile-optimized and uses HTTPS with good SSL configuration, though it lacks some security headers and formal privacy documentation. The cookie consent mechanism is implemented, reflecting some level of privacy compliance. From a security perspective, the site benefits from HTTPS and no visible exposed sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. No privacy policy or terms of service pages were found, which is a compliance gap. The site uses tracking and advertising tools with consent defaults denying ad and analytics storage, indicating some privacy awareness. Overall, Monte Bú presents a professional and trustworthy online presence for a small hospitality business, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and compliance.

A

Aqualand Moravia

aqualand-moravia.cz

51

Aqualand Moravia operates the largest aquapark in the Czech Republic, offering a wide range of water attractions, wellness services, and accommodation options. The website presents a professional and user-friendly interface with multilingual support and comprehensive information about services, events, and ticketing. The business targets families, tourists, and wellness seekers, positioning itself as a leading leisure destination in the region. Technically, the site uses a custom CMS platform with modern JavaScript frameworks and integrates analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data reduces domain trustworthiness but does not detract from the overall professional presentation. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details.

M

Miroslav Matyska

puzzle-puzzle.cz

59

Puzzle-puzzle.cz is a Czech Republic-based specialized e-commerce retailer focused on selling a wide variety of puzzles and related accessories for both children and adults. The website offers a broad assortment including 3D and 4D puzzles, baby puzzles, foam puzzle mats, and puzzle accessories. The business appears to have been established around 2011, as indicated by copyright metadata, and targets puzzle enthusiasts and families. The site is professionally designed with clear navigation and mobile optimization, providing a good user experience. However, the WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. The website uses HTTPS and standard tracking technologies such as Google Analytics and Google Tag Manager, and it implements a cookie consent mechanism with granular user controls, indicating some level of privacy compliance. No explicit privacy policy or terms of service pages were found, and no direct contact information such as emails or phone numbers are provided on the main page, which limits transparency and user trust. Security headers are not detected, suggesting room for improvement in security posture. Overall, the website is safe, family-friendly, and functional but would benefit from enhanced transparency and security practices.

W

Wastex, spol s r.o.

wastex.cz

41

Wastex, spol s r.o. is a Czech Republic-based company founded in 1990 specializing in the wholesale and retail distribution of fresh fruit, vegetables, and food products. The company serves a broad range of clients including corporate dining facilities, schools, hotels, restaurants, social care institutions, and retail customers primarily in the Zlín region and surrounding districts. Their business model combines daily deliveries, brick-and-mortar retail, and specialized services such as replacement fulfillment and supplier partnerships. The website reflects a medium-sized regional wholesaler with a professional online presence and clear contact information.

Svaz měst a obcí České republiky (SMO ČR) is a Czech non-profit association representing cities and municipalities, providing advocacy, education, legal support, and organizing events for local governments. The website serves as a portal for members and the public, offering news, event calendars, training, and member services. The organization holds a strong market position as a leading municipal association in the Czech Republic. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Font Awesome, Swiper.js, and Google reCAPTCHA v3 for security. The site is mobile-optimized with good navigation and content quality. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance, although no explicit privacy policy page was found. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, but lacks some recommended security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is missing, which lowers domain trustworthiness, but the website content and contact information indicate a legitimate organization. Overall, the site is professional and trustworthy with room for improvement in privacy transparency and security header implementation. The absence of WHOIS data is a notable gap that should be addressed to enhance domain legitimacy and trust.

S

Sdružení místních samospráv České republiky, z. s.

smscr.cz

49

Sdružení místních samospráv České republiky, z. s. is a Czech non-profit association representing local self-governments. The website serves as an official portal providing legislative information, working groups, member benefits, media relations, and conference organization. The target audience includes local government officials and municipalities within the Czech Republic. Technically, the website uses modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, with a cookie consent mechanism and Google Analytics integration. Security posture is moderate with HTTPS usage and reCAPTCHA, but lacks visible security headers and explicit privacy policies. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

S

Spolek pro obnovu venkova ČR

spov.org

48

Spolek pro obnovu venkova ČR is a Czech non-profit association dedicated to rural renewal and community development across the Czech Republic. The website serves as the official portal providing information about the association's activities, regional organizations, projects, conferences, and publications. It targets municipalities, local communities, and stakeholders interested in rural development. The site is well-structured with clear navigation and content relevant to its audience. Technically, the website employs modern frontend technologies including jQuery, Bootstrap 4.4.1, Swiper.js for slideshows, and mmenu.js for mobile menus. The site is mobile responsive and includes cookie consent mechanisms indicating GDPR awareness. However, no explicit privacy policy or terms of service pages were found in the provided content. From a security perspective, HTTPS is used, and cookie consent is implemented, but security headers and advanced security policies are not evident. No vulnerability disclosure or incident response information is provided. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and structure suggest a legitimate organization. Overall, the website is professional, content-rich, and serves its purpose well. Strategic improvements include adding explicit privacy and security policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

V

Vesnice roku v Programu obnovy venkova

vesniceroku.cz

53

Vesnice roku is a Czech Republic based government-supported non-profit competition focused on rural village development and community engagement. Established in 1995, it encourages rural inhabitants and municipalities to actively participate in local development and preserve traditions. The website serves as an information portal for the competition, results, news, and application processes. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and CodeRed CMS, hosted on DigitalOcean infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with no dedicated privacy or terms of service pages. Contact information is limited but includes a phone number and physical address in Prague. Social media presence is active on Facebook and Instagram. Overall, the website is trustworthy and professionally maintained, supporting a well-established government program.

Cryosoft.cz is a Czech-based internet advertising agency specializing in custom web development and multimedia projects. The company offers comprehensive internet projects including web presentations, CRM systems, e-shops, and online catalogs, supported by their proprietary CryoADMIN administration interface. Additionally, they provide multimedia services such as corporate identity creation, promotional videos, and original music production. The business targets clients seeking tailored digital solutions primarily within the Czech market. The website content is professional and well-structured, reflecting a small but specialized agency with a focus on quality and client references. Technically, the website employs standard web technologies including jQuery, CSS, and JavaScript, with a responsive design and good SEO practices. HTTPS is enforced, and cookie consent mechanisms are implemented to comply with GDPR requirements. However, no explicit privacy policy page was found, and no contact emails or phone numbers are directly visible on the homepage, which could impact user trust and compliance. From a security perspective, the site benefits from HTTPS and basic security best practices but lacks advanced security headers and published security policies or incident response contacts. The absence of WHOIS data reduces domain trustworthiness, although the website content and business information appear legitimate and consistent with a long-standing operation since 2006. Overall, the security posture is moderate with room for improvement in transparency and policy publication. The overall risk assessment is low to moderate, with recommendations to enhance security headers, publish privacy and security policies, and provide clear contact information to improve trust and compliance. The website is accessible without WAF or blocking mechanisms, enabling full content analysis.

L

Louda Holding a. s.

louda.cz

10

Louda Holding a. s. is a well-established Czech family-owned holding group founded in 1992, operating across six diverse sectors including automotive sales and service, mobility and financing, real estate development, manufacturing, glass production, and education. The company employs over 1,500 people and holds a strong market position as the largest ŠKODA and Hyundai car dealer in the Czech Republic and the largest carsharing provider. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting a general Czech audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Cookiebot, hosted via REG-ZONER, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, reCAPTCHA integration, and cookie consent management, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or blocking mechanisms.

S

SKI Bižu s.r.o.

skibizu.cz

51

SKI Bižu s.r.o. operates the SkiJizerky.cz website, providing winter sports services in the Jizera Mountains region of the Czech Republic, including ski areas Tanvaldský Špičák, Severák, and Bedřichov. The company offers ski passes, ski schools, equipment rentals, and transportation services such as skibus. The website targets winter sports enthusiasts and tourists seeking family-friendly ski resort experiences. The business appears to be a small regional operator with a focus on hospitality and tourism services. Technically, the website uses modern web technologies including jQuery and Adform tracking scripts, with a responsive design and good SEO practices. The site is served over HTTPS, includes cookie consent mechanisms, and provides multilingual support. However, no CMS or hosting provider details were identified, and some security headers appear to be missing. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website is professional and trustworthy in appearance, with good content quality and user experience. The main risk lies in the unknown domain registration status and limited publicly available contact information. Strategic improvements in security headers, incident response transparency, and WHOIS registration clarity are recommended.

Holidayinfo.cz is a Czech-focused online portal providing comprehensive information about holiday resorts, including ski areas, accommodation, webcams, weather forecasts, and related tourist services. The website targets tourists and visitors interested in Czech recreational destinations, offering seasonal content for both summer and winter activities. The business operates as an information service platform with a niche regional focus, leveraging partnerships with related service providers such as accommodation platforms and ski pass services. The domain's long registration history since 2000 supports its established presence in the market. Technically, the website employs a custom JavaScript-based platform with libraries such as jQuery and Modernizr, integrated with Google Tag Manager and Google Analytics for tracking. The site uses HTTPS and implements a cookie consent banner, indicating basic privacy compliance. However, it lacks visible privacy policy and terms of service pages, and no direct contact information is provided on the homepage. The design is professional and consistent, though mobile optimization and accessibility are basic. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks published security policies, incident response contacts, and advanced security headers in the HTML content. No vulnerabilities or suspicious patterns were detected. The WHOIS data confirms domain legitimacy and consistency with the website's content and business focus. Overall, Holidayinfo.cz presents a trustworthy and functional information portal with room for improvement in privacy disclosures, security transparency, and contact availability. Strategic enhancements in these areas would strengthen user trust and compliance posture.

O

Omega Design

omegadesign.cz

47

Omega Design is a well-established Czech graphic and marketing design agency specializing in brand creation, graphic design, photography, copywriting, and both offline and online advertising solutions. The company has been operating since 1996 and serves a diverse clientele ranging from small to large brands. Their website reflects a professional and consistent brand image with comprehensive service offerings and a strong digital presence. Technically, the site is built on WordPress with modern tools such as jQuery, Swiper.js, and Google Tag Manager, indicating a mature digital infrastructure. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies and an opt-in consent mechanism. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though some security headers are missing and no explicit security policies or incident response contacts are published. Overall, the website is trustworthy, well-designed, and business-appropriate, though WHOIS data is unavailable, likely due to privacy protection, which is common for small agencies.

A

as4u.cz, s.r.o.

poznejlitovel.cz

61

Poznej Litovel is an official city tourism and information portal for Litovel, Czech Republic, providing comprehensive details on local culture, tourism, accommodation, services, and events. The website targets tourists and local visitors, serving as a regional hub for promoting the city's attractions and activities. The business model appears to be supported by local government or municipal funding, focusing on community engagement and tourism promotion. Technically, the website employs a custom CMS called Public4u, leveraging common JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site includes a Google Translate widget for multilingual support and demonstrates moderate performance with good mobile optimization. However, accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. No advanced security headers or explicit security policies were detected, and no vulnerability disclosure or incident response information is provided. The absence of WHOIS data reduces domain transparency and trustworthiness, although the website content and social media presence support its legitimacy. Overall, the website is professionally designed with good content quality and user experience but would benefit from enhanced security practices and improved transparency regarding domain registration and contact information.

Městská knihovna Litovel operates as a public library serving the Litovel community in the Czech Republic. The website provides comprehensive information about library services, including lending for children and adults, electronic books, internet access, regional functions, and cultural events. The target audience primarily consists of local readers and visitors interested in library resources and activities. The business model is that of a public institution focused on education and cultural enrichment. Technically, the website is built on the Public4u CMS platform and utilizes jQuery and JavaScript for interactive features. While the site is functional and moderately optimized, mobile responsiveness and accessibility could be improved. The site enforces HTTPS and includes cookie consent mechanisms, indicating a baseline of privacy compliance. From a security perspective, the site lacks advanced security headers and does not expose sensitive data or vulnerable libraries. No security incidents or policies are publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and external links suggest legitimacy. Overall, the site maintains a good security posture for a small public institution but could benefit from enhanced security best practices. The overall risk is low given the nature of the business and content, but improvements in technical implementation and security hardening are recommended to maintain trust and compliance.

Městský klub Litovel is a small, community-focused cultural institution based in Litovel, Czech Republic. It provides a variety of cultural events, including concerts, theater performances, exhibitions, and educational programs, targeting local residents and visitors interested in cultural activities. The website serves as an information portal and ticket sales platform, reflecting its role as a local cultural hub. The organization appears to be non-profit and closely linked with local government and cultural partners, as evidenced by partner logos and contact information.

M

Mikroregion Litovelsko

litovelsko.eu

66

Mikroregion Litovelsko is a regional governmental association representing 23 municipalities in the Czech Republic, focused on promoting local tourism, culture, and community engagement. The website serves as an information hub for residents and visitors, providing news, event calendars, official documents, and regional highlights. The organization positions itself as a key local government entity with a strong community orientation. Technically, the website is built on the Public4u CMS platform, utilizing jQuery, Mapy.cz APIs for interactive maps, and other JavaScript libraries to enhance user experience. The site is mobile-optimized with good navigation and content structure, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. However, no advanced security headers or incident response information is present, suggesting room for improvement in security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental purpose. The lack of WHOIS data is due to privacy protection by the registry, which is common for such entities. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

M

Město Frýdlant

mesto-frydlant.cz

61

Město Frýdlant operates an official municipal website serving residents, tourists, and local businesses by providing comprehensive information about local government, events, public notices, and community services. The site is positioned as the authoritative source for municipal information in the Frýdlant region of the Czech Republic. The business model is focused on public service and information dissemination, targeting a broad audience including citizens and visitors. Technically, the website uses a proprietary CMS called Public4u, supplemented by common JavaScript libraries such as jQuery and jQuery UI. It integrates analytics tools like Google Analytics and Smartlook for user behavior tracking. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism aligned with GDPR requirements. However, mobile optimization and accessibility features are basic, and no advanced security headers were detected. From a security perspective, the website demonstrates a moderate security posture with HTTPS enforcement and privacy policies in place. There is no evidence of exposed sensitive data or vulnerable libraries, but the absence of security headers and incident response information indicates room for improvement. The lack of WHOIS data for the domain is a concern, reducing trust from a domain registration standpoint, though the website content and official contact details support its legitimacy. Overall, the website is functional, professional, and trustworthy for its intended municipal audience. Strategic improvements in security headers, mobile responsiveness, and transparency around security policies would enhance its security posture and user trust.

R

RAUL, s. r. o.

ski-tour.cz

47

ČEZ SkiTour is a prominent organizer of cross-country skiing events in the Czech Republic, targeting amateur skiers and winter sports enthusiasts. The website serves as a hub for race information, news updates, multimedia content, and race results. It holds a strong market position as the largest series of such events in the country, with a clear focus on community engagement and event promotion. Technically, the site employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, some technical aspects such as security headers and explicit privacy policies could be improved. The security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the site is professional and trustworthy, though the absence of WHOIS data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and publishing incident response information to bolster trust and compliance.

W

Worldloppet

worldloppet.com

67

Worldloppet is a global federation uniting 19 major cross-country ski marathons worldwide, fostering a large and active skiing community. The website serves as a comprehensive platform offering race calendars, results, rankings, and membership programs such as Passports and Masters. It targets skiing enthusiasts globally and operates primarily as a non-profit organization promoting the sport. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by plugins like Slider Revolution and GDPR compliance tools. It uses Google Analytics and Facebook Pixel for user tracking and marketing insights. The site is mobile-optimized with good SEO practices and a moderate performance profile. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and visible security policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and social media presence indicate a professional and trustworthy organization. Overall, the site is well-structured and content-rich, serving its community effectively. However, it would benefit from improved transparency in domain registration, enhanced security headers, and explicit privacy and security policies to strengthen trust and compliance.

I

iLIBERECKO.cz - Zprávy z Libereckého kraje

iliberecko.cz

60

iLIBERECKO.cz is a Czech regional news portal delivering independent news and updates focused on the Liberec region. It covers a broad range of topics including education, culture, economy, politics, and sports, targeting residents and visitors interested in local affairs. The website operates on a business model primarily driven by advertising and premium content subscriptions, positioning itself as a key regional media outlet. Technically, the site employs modern web technologies such as Bootstrap, Laravel Livewire, and integrates Google Analytics and Adsense for analytics and monetization. The site is mobile responsive and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and includes CSRF tokens and cookie consent mechanisms, but lacks some recommended security headers. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective, though the website content and structure suggest legitimacy. Overall, the site scores well in content quality and technical implementation but could improve in security header implementation and explicit contact information to enhance trust and compliance.

Z

Zucchetti Hospitality s.r.l.

ovosodo.net

37

Ovosodo is a digital agency specializing in UI/UX, web design, and development services, operating as a business unit of Zucchetti Hospitality s.r.l., part of the larger Zucchetti Group. The company targets businesses seeking comprehensive digital solutions, emphasizing equal attention to code and design. Their market position is that of a specialized subsidiary within a reputable technology and hospitality group, founded in 2003. The website reflects a professional and consistent brand image with clear service offerings and recent project showcases. Technically, the website employs modern web technologies including jQuery, Vimeo Player integration, and Iubenda for cookie consent management, alongside Google Analytics and Tag Manager for tracking. The site is mobile optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, ensuring GDPR compliance. However, it lacks explicit security policies and incident response contacts, and no advanced security headers were detected. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and business information are credible and professionally presented. Overall, the website presents a low risk with good privacy compliance and business credibility, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement to enhance trust and security posture.

S

Seattle Manufacturing Corporation

smcgear.com

61

Seattle Manufacturing Corporation (SMC Gear) operates an e-commerce platform specializing in high-quality climbing, rescue, and industrial gear. Their product range includes carabiners, pulleys, descenders, and specialized rescue equipment, targeting professionals in rescue, alpine, and climbing sectors. The company has a stable market position as a niche manufacturer and retailer with a medium-sized business footprint, founded in 2010. Technically, the website is built on Magento 2, leveraging modern JavaScript libraries such as RequireJS, jQuery, and KnockoutJS, with Bootstrap and Font Awesome for styling and UI components. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting is managed via Go Montenegro Domains, LLC as registrar, with no DNSSEC enabled. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is available via a customer service email and contact page, but no dedicated security or incident response contacts are provided. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy policy visibility, security headers, and DNS security would strengthen its security posture and compliance standing.

C

Cascade Rescue Company

cascade-rescue.com

60

Cascade Rescue Company is a specialized manufacturer and retailer of high-quality rescue equipment designed for professionals such as fire departments, air operations teams, helicopter rescue units, ski patrols, and military personnel. Established in 2008, the company operates a professional e-commerce platform offering a wide range of products and training services. Their market position is that of a trusted niche provider with strong industry certifications and partnerships. Technically, the website is built on the BigCommerce platform using modern web technologies and integrates multiple marketing and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and security headers could enhance it further. Privacy compliance is partial, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with room for security and privacy enhancements.

E

Elevated Safety, LLC

elevatedsafety.com

55

Elevated Safety, LLC is a specialized provider of professional rope access, confined space, tower rescue, and rope rescue training courses, services, and rescue gear. Established in 2010, the company operates globally with training facilities across multiple U.S. states and Europe, targeting professionals and organizations in industrial safety and rescue sectors. Their business model combines training services with e-commerce sales of specialized safety gear, positioning them as a reputable niche player with strong industry partnerships. The website infrastructure is built on WordPress with integrated BigCommerce for e-commerce, supported by modern JavaScript libraries and analytics tools such as Google Analytics and Segment. Hosting is supported by Microsoft Azure DNS services. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is moderate; HTTPS is enforced with domain registration protections in place, but DNSSEC is not enabled and no explicit security headers or incident response policies are published. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism despite use of tracking scripts. No vulnerabilities or malware indicators were detected. Overall, the website is professional and trustworthy with room for improvement in security hardening and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen their digital maturity and trustworthiness.

B

BrandBits

brandbits.com

46

BrandBits is a small technology company founded in 2009 that offers cloud-hosted SaaS tools designed to enhance customer engagement and brand presentation. Their key services include interactive flipbooks, slidebooks, store locators, visitor recordings, and feedback widgets, targeting businesses seeking to improve their digital customer experience. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and moderate SEO optimization. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and analytics tools such as Matomo and Google Tag Manager. Hosting and DNS are managed via Cloudflare, with SSL properly configured. The site is mobile optimized and performs moderately well, though accessibility features are basic. Cookie consent is managed through Cookiebot, indicating some privacy compliance efforts. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. The login form uses secure POST methods but no advanced security features are evident. Overall security posture is moderate but could be improved with additional controls and transparency. The overall risk is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and improving privacy compliance disclosures to enhance trust and security culture.

K

Krajské sdružení NS MAS ČR Jihočeského kraje

jihoceskemas.cz

43

Krajské sdružení NS MAS ČR Jihočeského kraje is a regional non-profit association focused on coordinating local action groups and community development projects in the South Bohemian region of the Czech Republic. The website serves as an official portal providing information about their projects, events, and partnerships with government and EU bodies. The organization targets local communities, municipalities, and seniors, emphasizing energy projects and social cooperation. Technically, the website uses a modern but custom-built infrastructure with popular JavaScript libraries such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and partner affiliations support legitimacy. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

N

Národní síť místních akčních skupin České republiky, z.s.

nsmascr.cz

42

Národní síť místních akčních skupin České republiky, z.s. is a Czech non-profit association uniting local action groups working on community-led local development using the LEADER method. The organization represents 178 member groups covering 91% of the Czech Republic, providing advocacy, training, and coordination services. The website is professionally designed, mobile-optimized, and regularly updated with news and events relevant to its audience. Technically, it uses modern JavaScript libraries and enforces HTTPS with appropriate security headers, indicating a good security posture. However, the absence of WHOIS data and lack of published security or incident response policies slightly reduce trustworthiness. Overall, the site is a credible resource for stakeholders in rural development in the Czech Republic.

S

Spolek pro obnovu venkova ČR

spovcr.cz

39

Spolek pro obnovu venkova ČR is a Czech non-profit organization focused on the renewal and development of rural areas in the Czech Republic. The website serves as an official platform providing information about their projects, regional organizations, events, and community initiatives. It targets municipalities, local action groups (MAS), associations, and individuals interested in rural development. The organization appears established and trusted within its niche, offering resources and networking opportunities for rural revitalization. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Swiper for UI components, ensuring a responsive and accessible user experience. However, the site lacks a published privacy policy and terms of service, which are important for compliance and user trust. Security-wise, HTTPS is used and a cookie consent mechanism is implemented, but security headers and vulnerability disclosures are absent, indicating room for improvement in security posture. The absence of WHOIS data limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy and security transparency.

P

Pivovar Svijany

zameksvijany.cz

47

Zámek Svijany is a heritage tourism and hospitality website representing a historic castle near Český ráj, Czech Republic, owned and restored by the Pivovar Svijany brewery. The site offers cultural exhibitions, castle tours, event hosting, and promotes the brewery's traditional beer products. The website is professionally designed with good navigation, mobile optimization, and content relevance, targeting tourists, event attendees, and beer enthusiasts. Technically, the website uses a modern JavaScript stack including jQuery, Google Tag Manager, Google Analytics, and lightbox galleries. It employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. The site uses CAPTCHA on contact forms to prevent spam and has basic accessibility features. However, no explicit security headers beyond HTTPS were detected, and no security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and form validation. The absence of WHOIS registrant data due to privacy protection slightly reduces trust but is common for small businesses. No critical vulnerabilities or exposed sensitive data were found. The site lacks a security.txt or vulnerability disclosure page, which could improve transparency. Overall, the website is a trustworthy and professional digital presence for a small hospitality and cultural business. Strategic improvements include adding security headers, publishing security policies, and enhancing accessibility. The domain WHOIS data absence is noted but does not critically impact legitimacy given the business context.

P

PIVOVAR SVIJANY, a.s.

pivobranisvijany.cz

45

Pivovar Svijany is a traditional Czech brewery with a rich history dating back to 1564. The website pivobranisvijany.cz primarily promotes the 14th annual Svijanské Pivobraní event scheduled for August 23, 2025, featuring music and the brewery's beer offerings. The company targets beer enthusiasts and local community members, leveraging its heritage and quality products to maintain a strong regional presence. The business model focuses on event promotion and brand marketing to support brewery sales. Technically, the website uses a common and stable technology stack including jQuery, Bootstrap, and various UI libraries. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, SEO and accessibility features are basic, and no CMS or advanced platform is detected. Hosting appears to be provided by Active24, consistent with the domain registrar information. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, indicating gaps in compliance with GDPR and best practices. No forms or sensitive data collection mechanisms are present, reducing immediate risk. The domain is relatively new (created in 2023) but aligns with the event-specific purpose rather than the brewery's main website. Social media links connect to official brewery accounts, enhancing trust. Overall, the website is functional and professional but would benefit from improved privacy compliance, security hardening, and enhanced SEO and accessibility. The risk level is moderate due to missing policies and security headers but no critical vulnerabilities or blocking mechanisms are detected.

J

JOHNNY SERVIS GmbH

johnnyservis.at

60

JOHNNY SERVIS GmbH is a medium-sized Austrian company specializing in the rental and sale of mobile toilets, sanitary and storage containers, mobile offices, and event infrastructure such as construction fences. With over 25 years of experience, the company serves businesses and institutions requiring tailored solutions for construction sites, cultural and sporting events, and private occasions. The website is professionally designed, multilingual, and features clear navigation and contact information, supporting a strong market presence in Austria and neighboring countries. Technically, the site runs on Joomla CMS with VirtueMart e-commerce, integrates Google Tag Manager and Analytics with GDPR-compliant cookie consent, and is mobile optimized with good performance. Security posture is solid with HTTPS and consent management, though it lacks advanced security headers and a public incident response policy. WHOIS data is unavailable due to NIC.AT restrictions, which slightly reduces trust but is mitigated by visible certifications and professional presentation.

J

JOHNNY SERVIS s.r.o.

johnnyservis.sk

54

JOHNNY SERVIS s.r.o. is a well-established Slovak company specializing in the rental and sale of mobile toilets, sanitary containers, mobile fencing, offices, and event equipment. With over 25 years of experience, it serves both business clients and the general public, positioning itself as a regional leader in its niche. The website reflects a professional and consistent brand image, supported by ISO certifications and clear contact information. Technically, the site is built on Joomla CMS with VirtueMart e-commerce, leveraging modern web technologies such as jQuery and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR, with no signs of malicious activity or content blocking.

D

Delirest services s.r.o.

ceskyobed.cz

66

Český oběd is a Czech-language website focused on industrial and school catering, providing recipes, sustainability guidance, and insights into the catering industry. It is operated under the brand umbrella of Compass Group, a global leader in food services, with visible partnerships to related Compass Group entities such as Eurest and Scolarest. The website targets professionals and stakeholders in the Czech catering sector, emphasizing practical and sustainable kitchen practices. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics, and implements a cookie consent mechanism compliant with GDPR standards. Security posture is good with HTTPS enforced, but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which is common but reduces transparency. Overall, the site is professional, content-rich, and trustworthy within its niche.

Č

Český hydrometeorologický ústav

chmi.cz

61

The Český hydrometeorologický ústav (ČHMÚ) is the Czech Republic's national meteorological and environmental authority, providing comprehensive weather forecasts, hydrological data, and air quality monitoring. The website serves a broad audience including the general public, government bodies, media, and business partners, offering detailed environmental data, news, and specialized services such as mobile applications. The organization holds ISO 9001 certification, reinforcing its credibility and commitment to quality. Technically, the website employs traditional web technologies including jQuery and JavaScript, with a moderate performance profile and basic mobile optimization. The site implements a robust cookie consent mechanism aligned with GDPR requirements, denying marketing and analytics cookies by default. While HTTPS is used, explicit security headers are not detected in the provided data, suggesting room for improvement in security hardening. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of detailed incident response contacts and security headers indicates potential gaps. Privacy compliance is strong, supported by comprehensive privacy and cookie policies. The domain WHOIS data is unavailable due to CZ.NIC policies, but the domain usage and content strongly indicate legitimacy as a government entity. Overall, the website is professional, trustworthy, and content-rich, with recommendations to enhance security headers, mobile responsiveness, and incident response transparency to further strengthen its security and user trust.

J

JOHNNY SERVIS s.r.o.

johnnyservis.cz

54

JOHNNY SERVIS s.r.o. is a well-established Czech company specializing in the rental and sale of mobile toilets, sanitary and storage containers, mobile fencing, and event equipment. With over 25 years of experience, it serves both business clients and the public for construction sites, cultural, sports, and social events primarily in the Czech Republic and neighboring countries. The company positions itself as a market leader with a comprehensive product portfolio and additional services such as express delivery through its GO1 platform. Technically, the website is built on Joomla CMS with VirtueMart e-commerce components, leveraging modern JavaScript libraries like jQuery and integrating marketing and analytics tools such as Google Tag Manager and Seznam.cz tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. From a security perspective, the site uses HTTPS and has basic security best practices in place, though explicit security policies and incident response details are not publicly available. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trustworthiness and should be investigated further to confirm domain legitimacy. Overall, JOHNNY SERVIS demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and security assurance.

P

PIVOVAR SVIJANY, a.s.

pivovarsvijany.cz

49

Pivovar Svijany, a.s. is a historic Czech brewery established before 1564, specializing in traditional Czech beer production. The company operates a professional website showcasing its product range, events, and retail options including an e-shop. The site targets adult consumers with age verification and complies with relevant privacy and cookie regulations. Technically, the website employs modern tracking and analytics tools such as Google Analytics and Facebook Pixel, integrated via Google Tag Manager. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and branding consistency. Security posture is solid with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the company's established market presence and social media footprint.

Č

Česká mincovna

ceskamincovna.cz

52

Česká mincovna, a.s. is a well-established Czech company specializing in the manufacture and sale of commemorative and investment coins, medals, and related collectibles. With a history dating back to 1993 and a domain registered since 2002, the company holds a strong market position supported by partnerships with the Czech National Bank and numismatic societies. Their product offerings target collectors, investors, and gift buyers through a professional e-commerce platform. The website demonstrates a mature technical infrastructure utilizing modern JavaScript libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, secure login forms, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR-aligned consent. Overall, the site projects high professionalism and trustworthiness with clear business information and certifications.

N

Národní sportovní agentura

agenturasport.cz

59

Národní sportovní agentura is a Czech government agency dedicated to the development and support of sports within the Czech Republic. The agency operates as a key national authority, providing funding programs, regulatory oversight, and strategic initiatives to enhance sports infrastructure and athlete development. The website reflects a professional government presence with clear branding, structured data, and active social media engagement. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and maintaining good performance and accessibility standards. Security posture is strong with HTTPS and security headers implemented, though some improvements in cookie consent and vulnerability disclosure are recommended. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

C

Czech News Center

blesk.cz

61

Blesk.cz is a leading Czech news portal operated by Czech News Center, offering a wide range of content including news, celebrity gossip, sports, entertainment, and weather forecasts. The site targets a broad general audience in the Czech Republic and operates on an advertising-supported business model with premium subscription options. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and multiple third-party analytics and advertising services, ensuring a robust digital presence with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses a consent management platform for GDPR compliance, and integrates reputable ad and analytics networks, although additional security headers could enhance protection. Overall, the website demonstrates a mature digital infrastructure with strong business credibility and compliance posture.